Iowa Privacy Disclosure

1. Overview of the law

The Iowa Consumer Data Protection Act took effect on January 1, 2025. It applies to businesses that process personal data of at least 100,000 Iowa residents, or 25,000 residents if more than half of revenue comes from selling personal data. The law is enforced by the Iowa Attorney General. SIE meets the 100,000 resident threshold and applies the ICDPA in full.

2. Your rights

• Right of access. Confirm processing and get a copy of your personal data.
• Right to delete. Have personal data we hold about you erased.
• Right to portability. Receive your data in a usable format.
• Right to opt out. Stop the sale of personal data and targeted advertising.
• Right to appeal. Appeal a denial within sixty days.
• No stand-alone right to correct. SIE still accepts correction requests as a courtesy.

3. How SIE complies

Iowa uses an opt-out model for sensitive data, not opt-in. We give Iowa residents a clear opt-out before processing sensitive categories such as data revealing race, religion, health, sexual orientation, citizenship, genetic or biometric identifiers, and precise geolocation. We do not knowingly process the personal data of a child under thirteen without verifiable parental consent under federal COPPA rules.

4. Authorized agents

The ICDPA does not require us to honor authorized agents. SIE accepts authorized-agent submissions as a courtesy when they include a signed permission letter from you. We may verify the request directly with you before acting.

5. How to submit a request

Or email [email protected] with the subject line "Iowa ICDPA Request". Iowa allows up to ninety days to respond, with one possible forty-five-day extension. SIE typically responds within forty-five.

6. Effective date and scope

The ICDPA took effect on January 1, 2025. It covers Iowa residents acting in a personal or household context. Personal data processed in a B2B or employment context is out of scope.